Work on refactoring organization controller specs

The result of our pairing that isolated controller specs from user model and used can_edit? where appropriate given current state of the app